InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1650998695-validUntil.2022-05-10T18.34.30Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 791a47c..37f4380 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20220425T183837" 
Name="urn:mace:incommon" validUntil="2022-05-09T18:38:37Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20220425T183837"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>m7S06aZfXiPoc7prRCDi2VC4H7chaK7AMzpg9Gr4JQM=</DigestValue></Reference></SignedInfo><SignatureValue>rnxDyqUHq0+m0NqRKDFjjBi/fbOYyZuK1oejI1M3q0gZ44JGM/yHEmuTcXs3pJE8szFihKv2pxrp&#13;
-siWAVeX9YrysTTwyiLOnXf5s9WJfugG6avz7VqviKWyfKUfni8+JcG2dhV1OpjDvNCR25+V4EgUi&#13;
-2/77Ma0jikkUQZTNk9TtzE3WP4ybT2MeXbsUsWwtvU4Dm8Vnzxket1vSaYk3J0Cl8uCZWxNTXsu9&#13;
-pOX3TEAm3vM5tR4NhvMYnPr2H/hSeUnt/JG13Z9g1sk9hxH2kqkmABFeLtvriTGfn/EpANfkHmUC&#13;
-oztZ8WlLsX8l/MDIMz3rWmJDFwIICFcwTMC3uQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20220426T183430" 
Name="urn:mace:incommon" validUntil="2022-05-10T18:34:30Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20220426T183430"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>diSiXDPRWUzXhk2IBu/N7sl+REiPh24sJC107jAbu/o=</DigestValue></Reference></SignedInfo><SignatureValue>gxfKFUizRY1A1GKxpLavX+8umdTaIK2UD1KFiAq8TI08WXg2V5BfMtdCtVLdR9wcg5mKCTNR8yYd&#13;
+l9CLUBilv7Gbn2rqltM2Nzfl0ipLuo/+B/FnbundlEyjUSlaOywWLBTLvcDQOY12I0TuGtDBL7sa&#13;
+FCYwlsb8WmIFX3yMDYWRruJqP3c+L+EW8Bu78UMHbCzWqx0GPvZn3yV9ZUaRYaP953CGDTCAgkxR&#13;
+yF98+Yh+VhrPWSTbI+heGSoA5BZVL4bg0Lio/IPVi6mJ0/soKdP3YPTZfEz9vNEQdMKRaf+tgGu/&#13;
+sjaPkiJJA80OJLFGo+8qpifsTfVyQiTHhswckw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2022-04-25T18:38:37Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2022-04-26T18:34:30Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://mfa-auth.dev2.phenoapp.com/Saml2";>
   <Extensions>
@@ -202895,7 +202895,7 @@ 
UlUgvK8Z7+S1b6O5P47U4zqmZAk7Q0q8WjymSUGVEHLxQRWDfKbfJ+3o2YD2jDyt
         <mdui:Logo height="64" width="350" 
xml:lang="en">https://common.accessiblelearning.com/Shibboleth/logo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor>
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
           <!-- Serial No. 15926097262854296098, expires on Wed May 25 
12:11:37 2022 GMT -->
@@ -202943,6 +202943,52 @@ RVOg5L71xCJuv41iNoaKm0h/cf/VIoud7auh3SW+UQTZ
       <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 15844845835805822193, expires on Sat May 27 
07:04:00 2023 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://kea.accessiblelearning.com/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://kea.accessiblelearning.com/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://kea.accessiblelearning.com/Shibboleth.sso/SAML2/Artifact"; 
index="3"/>
@@ -331155,28 +331201,28 @@ gJ2b60YzBOqq6XqVnwWvqY6VgHjf/OSqTBkq9p8TuA5MzQDh
         </ds:X509Data>
       </ds:KeyInfo>
     </KeyDescriptor>
-    <KeyDescriptor use="signing">
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
-          <!-- Serial No. 780083802787297115373944265879981057279371288682, 
expires on Thu Aug 12 06:30:30 2038 GMT -->
+          <!-- Serial No. 858467623325549318500775905284781335088052441285, 
expires on Thu Aug 12 06:30:30 2038 GMT -->
           <ds:X509Certificate>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1650998695-validUntil.2022-05-10T18.34.30Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations